well i got sp3, but it didn't help infact after trying out various spyware/adware progs it's looking rather bleak hijackthis found 2 specific entries which scream malware but I can't manage to delete them, finding them in regedit with my pc in safemode the permissions on the files/folder are screwed up, with a 'CREATOR USER' having special permissions I just can't get rid of. the specific hijackthis entries O2 - BHO: (no name) - {56320505-CFA5-463A-B95F-161E17450FAB} - c:\windows\system32\cljdclj.dll O20 - Winlogon Notify: jvheynhl - C:\WINDOWS\SYSTEM32\cljdclj.dll the jvheynhl folder i found in regedit has some unpleasant looking entries in it that may explain my winlogon restarts. it too has the creator user permission problem, whenever selecting to fix the entries in hijackthis, they are not removed when i rescan. Ideally I need help either with regedit type tutorials (im doing that now) to sort out that permissions issue, or an anti-malware prog that can remove these files.